cve-bin-tool
cve-bin-tool copied to clipboard
feat: Retain the response and justification fields in VEX input
- Updated input_vex() to retain triage justification and response from a vex input file.
- Updated input_vex() to use the CycloneDX v1.4 state enumerations when mapping to the Remarks enum.
- Replaced Remarks.Ignored with False Positive and Not Affected to keep the same granularity with the CycloneDX analysis states.
- Fixed an issue where the metrics table may have duplicate rows when output to the console.
- Updated test vector inputs to validate against CycloneDX schema.
Codecov Report
Attention: Patch coverage is 64.13043% with 33 lines in your changes are missing coverage. Please review.
Project coverage is 81.06%. Comparing base (
d6cbe40) to head (efe1c13). Report is 67 commits behind head on main.
Additional details and impacted files
@@ Coverage Diff @@
## main #3880 +/- ##
==========================================
+ Coverage 75.41% 81.06% +5.65%
==========================================
Files 808 812 +4
Lines 11983 12238 +255
Branches 1598 1654 +56
==========================================
+ Hits 9037 9921 +884
+ Misses 2593 1897 -696
- Partials 353 420 +67
| Flag | Coverage Δ | |
|---|---|---|
| longtests | 80.38% <64.13%> (+4.96%) |
:arrow_up: |
| win-longtests | 78.90% <62.06%> (?) |
Flags with carried forward coverage won't be shown. Click here to find out more.
:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.